@yeaft/webchat-agent 1.0.616 → 1.0.617

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yeaft/webchat-agent",
-  "version": "1.0.616",
+  "version": "1.0.617",
   "description": "Remote worker agent for Yeaft Web Code Agent — connects the native Yeaft engine, CLI providers, and workbench tools",
   "main": "index.js",
   "type": "module",

package/yeaft/person/contracts.js

@@ -1,7 +1,7 @@
 import { createHash } from 'node:crypto';
 
 // 只允许应用层显式产物；不要求或保存 provider 的隐藏推理。
-export const LIMITS = Object.freeze({ inputBytes: 8192, outputBytes: 65536, contextBytes: 65536, calls: 16, leaseMs: 15000 });
+export const LIMITS = Object.freeze({ inputBytes: 8192, outputBytes: 65536, calls: 16, leaseMs: 15000 });
 // Feedback cadence is not an execution deadline. Slow providers/tools remain cancellable.
 export const FEEDBACK = Object.freeze({ minMs: 30000, maxMs: 60000 });
 export const FEEDBACK_INSTRUCTIONS = "feedback describes user-visible communication, not a deadline. After about 30 seconds without a substantive reply, use reply for a concise, useful progress update at a natural execution boundary; aim for 30\u201360 seconds according to actual progress. Explain verified findings, limitations and what you are checking next, in the user's language. Do not repeat feedback.lastReply, invent progress, expose internal deliberation/decision/selfCheck, or claim an unexecuted tool succeeded. If no meaningful update exists, reply:null is appropriate; the host shows an honest waiting status around 60 seconds without interrupting the current request. With next non-null, a validated reply may be published as progress independently of cognitive state, and retained on cancellation/failure. Only next:null commits cognition and supplies the final reply. Do not call a tool or an extra model just to report progress. Each final reply should stand on its own and note unfinished work.";

package/yeaft/person/runtime.js

@@ -9,6 +9,7 @@ import { bytes, digest, fail, FEEDBACK, FEEDBACK_INSTRUCTIONS, LIMITS, PersonErr
 
 const messageRef = m => `message:${m.id}:${m.revision}`;
 const conceptRef = c => `concept:${c.id}:${c.revision}`;
+const ENVELOPE_TOKENS_RESERVED = 1024;
 
 /** Assemble bounded request copies. Omitting a record never deletes or truncates its durable original. */
 export function assembleContext({ snapshot, episode, provider, selection, previous, capabilityResult, remainingCalls, taskEvidence, dependencyRefs = [], activeCapabilities = foundationCapabilities(), capabilityMap = CAPABILITY_MAP, attachments = [], environment, feedback }) {
@@ -22,7 +23,11 @@ export function assembleContext({ snapshot, episode, provider, selection, previo
   const imageTokensReserved = images.length ? images.length * imageBudget.tokensPerImage : 0;
   const imageLabels = images.map(file => `Untrusted image attachment ${JSON.stringify(attachmentMetadata(file))}; source ${episode.messageId ? `message:${episode.messageId}:1` : `trigger:${episode.id}`}`);
   const imageLabelBytes = imageLabels.reduce((sum, label) => sum + bytes(label), 0);
-  const contextCap = Math.min(LIMITS.contextBytes, model.contextWindow - model.maxOutput - 1024 - imageTokensReserved);
+  // This is a byte allowance derived from the selected model's token window,
+  // not a token estimate or an independent fixed-size Person context limit.
+  const contextCap = model.contextWindow - model.maxOutput - ENVELOPE_TOKENS_RESERVED - imageTokensReserved;
+  if (!Number.isSafeInteger(model.contextWindow) || !Number.isSafeInteger(model.maxOutput) || model.maxOutput < 1 ||
+      !Number.isSafeInteger(contextCap) || contextCap < 1) fail('CONTEXT_LIMIT');
   const system = `${snapshot.person.soul}\n\n${PROPOSAL_INSTRUCTIONS}`;
   const triggerRef = `trigger:${episode.id}`;
   const inputMessageRef = episode.messageId ? `message:${episode.messageId}:1` : null;
@@ -125,7 +130,17 @@ export function assembleContext({ snapshot, episode, provider, selection, previo
     manifest: { stateVersion: snapshot.state.version, sourceRefs: [...sourceRefs], renderedSourceRefs: [...renderedRefs], inputDependencyRefs: [...sourceRefs], omitted,
       boundedRecentWindow: { messages: 12, recentConcepts: 12, focusedConcepts: 12 },
       attachments: attachments.map(attachmentMetadata), imageTokensReserved, imageBudget: images.length ? imageBudget : null,
-      contextBytes: bytes(system) + bytes(context) + imageLabelBytes, contextBudgetBytes: contextCap, outputTokensReserved: model.maxOutput,
+      contextBytes: bytes(system) + bytes(context) + imageLabelBytes, contextBudgetBytes: contextCap,
+      contextWindowTokens: model.contextWindow, outputTokensReserved: model.maxOutput, envelopeTokensReserved: ENVELOPE_TOKENS_RESERVED,
+      // Counts describe actual rendered sources, not the activity label or the
+      // inherited provenance read-set. Recall duplicates are counted in its page,
+      // not again as recent injection. Omitted counts cover byte-budget omissions
+      // from the bounded snapshot, not all records outside that window.
+      contextSources: { recentMessages: context.messages.length, recentConcepts: context.concepts.length,
+        omittedMessages: omitted.filter(item => item.ref.startsWith('message:')).length,
+        omittedConcepts: omitted.filter(item => item.ref.startsWith('concept:')).length,
+        recall: { kind: ['messages', 'concepts'].includes(capabilityResult?.kind) ? capabilityResult.kind : null,
+          count: ['messages', 'concepts'].includes(capabilityResult?.kind) ? capabilityResult.items.length : 0 } },
       modelCatalogRevision: provider.catalogRevision, capabilityCatalogRevision: capabilityMap.revision ?? capabilityCatalogRevision,
       activeCapabilities: context.capabilities.active.map(({ id, version, revision, availability }) => ({ id, version, revision, ...availability })), omittedCapabilities }, maxTokens: model.maxOutput,
   };

package/yeaft/person/script-worker.js

@@ -9,8 +9,6 @@ try {
   runtime = engine.newRuntime();
   runtime.setMemoryLimit(16 * 1024 * 1024);
   runtime.setMaxStackSize(256 * 1024);
-  const deadline = Date.now() + 200;
-  runtime.setInterruptHandler(() => Date.now() > deadline);
   context = runtime.newContext();
   const { code, input } = workerData;
   // Capture intrinsics before executing generated code; Function compiles ONLY a
@@ -57,6 +55,11 @@ try {
     if (typeof json !== 'string' || json.length > 8192) throw new ErrorType('JSON output limit');
     return json;
   })()`;
+  // Only guest evaluation consumes the 200ms execution budget. QuickJS context
+  // initialization and host source preparation are bounded by the parent's 3s
+  // worker deadline instead, including cancellation and cleanup.
+  const deadline = Date.now() + 200;
+  runtime.setInterruptHandler(() => Date.now() > deadline);
   const result = context.evalCode(source, 'created-capability.js');
   if (result.error) {
     result.error.dispose();

package/yeaft/person/sqlite-store.js

@@ -517,12 +517,22 @@ export class SqlitePersonStore {
       requestedModel: 'requested.model', requestedEffort: 'requested.effort', effectiveEffort: 'effective.effort', effortObserved: 'effective.effortObserved',
       selectionOrigin: 'selectionOrigin', reason: 'reason', code: 'code', terminalCode: 'terminalCode', outcome: 'outcome',
       contextBytes: 'manifest.contextBytes', contextBudgetBytes: 'manifest.contextBudgetBytes', outputTokensReserved: 'manifest.outputTokensReserved' };
+    // Never project a whole manifest/contextSources object: even malformed legacy
+    // records must not transfer arbitrary strings, refs or private nested data.
+    const number = (path, max = Number.MAX_SAFE_INTEGER) => `CASE WHEN json_type(record, '$.${path}') = 'integer'
+      AND json_extract(record, '$.${path}') BETWEEN 0 AND ${max} THEN json_extract(record, '$.${path}') ELSE NULL END`;
+    const contextMetadata = Object.entries({ contextWindowTokens: ['manifest.contextWindowTokens'], imageTokensReserved: ['manifest.imageTokensReserved'],
+      envelopeTokensReserved: ['manifest.envelopeTokensReserved'], recentMessages: ['manifest.contextSources.recentMessages', 12],
+      recentConcepts: ['manifest.contextSources.recentConcepts', 24], omittedMessages: ['manifest.contextSources.omittedMessages', 12],
+      omittedConcepts: ['manifest.contextSources.omittedConcepts', 24], recallCount: ['manifest.contextSources.recall.count', 5] })
+      .map(([key, args]) => `'${key}', ${number(...args)}`).join(', ');
+    const recallKind = `CASE json_extract(record, '$.manifest.contextSources.recall.kind') WHEN 'messages' THEN 'messages' WHEN 'concepts' THEN 'concepts' ELSE NULL END`;
     const usage = `json_object(${TOKEN_FIELDS.map(key => `'${key}', json_extract(record, '$.output.usage.${key}')`).join(', ')},
       'accountingVersion', json_extract(record, '$.output.usage.accountingVersion'),
       'accountingIncomplete', json(CASE json_extract(record, '$.output.usage.accountingIncomplete') WHEN 1 THEN 'true' ELSE 'false' END),
       'cacheTokensAreIncludedInInput', json(CASE json_extract(record, '$.output.usage.cacheTokensAreIncludedInInput') WHEN 1 THEN 'true' WHEN 0 THEN 'false' ELSE 'null' END))`;
     const metadata = `${project(fields).slice(0, -1)}, 'capabilityId', COALESCE(json_extract(record, '$.capability.id'), json_extract(record, '$.capabilityId')),
-      'usage', ${usage})`;
+      ${contextMetadata}, 'recallKind', ${recallKind}, 'usage', ${usage})`;
     const items = episodes.slice(0, limit).map(episode => {
       const events = this.sql(`SELECT ${metadata} AS metadata FROM traces WHERE ${SCOPE}
         AND json_extract(record, '$.episodeId') = ? AND json_extract(record, '$.kind') IN

package/yeaft/person/turn-diagnostics.js

@@ -4,6 +4,18 @@ export const TOKEN_FIELDS = Object.freeze(['inputTokens', 'outputTokens', 'reaso
 const numeric = value => Number.isSafeInteger(value) && value >= 0;
 const token = value => numeric(value) ? value : null;
 const string = value => typeof value === 'string' ? value : null;
+const count = (value, max) => numeric(value) && value <= max ? value : null;
+
+/** Bounded scalar counts only; missing legacy statistics remain unknown. */
+function contextSources(event) {
+  const recentMessages = count(event.recentMessages, 12), recentConcepts = count(event.recentConcepts, 24);
+  const omittedMessages = count(event.omittedMessages, 12), omittedConcepts = count(event.omittedConcepts, 24);
+  const recallCount = count(event.recallCount, 5);
+  const kind = ['messages', 'concepts'].includes(event.recallKind) ? event.recallKind : null;
+  if ([recentMessages, recentConcepts, omittedMessages, omittedConcepts, recallCount].every(value => value === null) && kind === null) return null;
+  return { recentMessages, recentConcepts, omittedMessages, omittedConcepts,
+    recall: recallCount === null && kind === null ? null : { kind, count: recallCount } };
+}
 
 /** Turn cursor is an exclusive numeric episode watermark, never a trace offset. */
 export function turnsPage(payload = {}) {
@@ -62,7 +74,9 @@ export function turnView(episode, events) {
         // It does not expose the response model: do not label configured intent as observed reality.
         dispatched: { model: string(event.requestedModel) }, effective: { model: null, effort: null },
         selectionOrigin: string(event.selectionOrigin), reason: string(event.reason), createdAt: event.createdAt, endedAt: null, code: null,
-        contextBytes: token(event.contextBytes), contextBudgetBytes: token(event.contextBudgetBytes), outputTokensReserved: token(event.outputTokensReserved),
+        contextBytes: token(event.contextBytes), contextBudgetBytes: token(event.contextBudgetBytes), contextWindowTokens: token(event.contextWindowTokens),
+        outputTokensReserved: token(event.outputTokensReserved), imageTokensReserved: token(event.imageTokensReserved), envelopeTokensReserved: token(event.envelopeTokensReserved),
+        contextSources: contextSources(event),
         usage: callUsage(null, false) });
       continue;
     }